
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json)
Hash identifier: LkRw/pWOvdSCAogeZEjYVklLlP74Yjc+bc2QaghhX9U=
Subject key identifier: 42:EC:75:2E:A1:36:88:4B:C7:64:2F:07:7B:E5:55:E5:CC:EA:2E:6D
Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
Manifest number: 0114
Signing time: Mon 27 Jul 2026 08:01:22 +0000
Manifest this update: Mon 27 Jul 2026 08:01:21 +0000
Manifest next update: Mon 03 Aug 2026 08:01:21 +0000
Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: lVqb1RAaWmMZKebV/1hxsiR3fvIWJwIDAeuI2VEwRrI=)
2: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: gt4tU/hcyIVMBkjGuvPu9y9CXe1mDoCcezI1psVlwHM=)
3: 47603784536011F180C8B9B49C833773.roa (hash: UiZtfEjCgBUhOSkEu8hjBg9c3hRjlkn0x10nUpaMUS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Validity
Not Before: Jul 27 08:01:21 2026 GMT
Not After : Aug 3 08:01:21 2026 GMT
Subject: CN=6a671052-638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:12:5d:3a:14:11:eb:ca:3d:ba:e5:d5:d7:
e9:4f:f4:40:fd:b0:fe:e7:71:90:5c:53:e0:68:b9:
c9:75:24:21:cd:b5:37:67:9a:69:37:d2:f4:5f:b3:
b7:d4:0d:d2:db:98:c2:95:d2:57:4f:4a:e1:53:90:
f5:71:56:ff:07:53:ba:7b:12:fb:ec:81:85:91:30:
e1:ba:26:1a:12:84:bc:12:95:b6:45:b8:21:01:09:
bd:c1:97:83:05:01:47:ae:7d:a0:8b:e9:3f:cd:ff:
2d:bc:30:36:e9:b8:4f:4e:52:aa:b6:ba:fe:1e:c3:
11:d6:2a:8b:56:43:9d:dc:0c:f7:97:94:ed:f4:36:
5a:e2:0b:0a:22:7a:8c:e4:8b:27:fd:40:03:77:a8:
8b:90:fa:42:5d:f5:fd:2e:d2:0a:ed:ab:cf:3d:61:
e5:aa:9a:fd:e7:55:5f:d4:c4:e3:1b:6f:aa:18:bb:
37:b4:2e:41:11:e5:5a:b6:16:b7:57:29:b3:bf:51:
08:70:06:ec:7c:51:c7:ae:cf:4b:4c:a9:c5:ea:98:
db:e1:5b:73:cd:56:33:3e:f6:f4:cb:e9:58:28:07:
df:f1:a0:71:f3:93:40:eb:d9:64:7e:78:07:36:e0:
7e:4a:87:68:58:5e:e8:34:26:bb:36:a9:ec:5b:77:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:75:2E:A1:36:88:4B:C7:64:2F:07:7B:E5:55:E5:CC:EA:2E:6D
X509v3 Authority Key Identifier:
keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fa:67:4c:66:89:e4:76:54:2a:68:fa:2b:6e:e0:9a:90:cc:
63:9f:56:5c:2f:dd:37:60:75:83:2b:48:ec:01:37:c9:53:f1:
e5:47:15:4b:50:cb:a6:f3:b0:14:7c:2f:68:81:3e:37:79:90:
2c:f9:07:0c:cb:41:c8:f6:9e:f1:52:4d:35:0a:cc:82:1f:06:
d4:38:3f:b9:71:61:5b:3e:1e:f6:d3:f9:d4:4e:23:e8:1e:94:
84:71:57:84:cc:86:22:7f:e8:4e:53:ba:eb:da:04:34:30:52:
13:ca:f2:fe:5c:82:3a:d6:5f:95:e4:a8:ca:20:73:4f:1d:c2:
88:32:1c:e0:c8:fb:5e:65:5b:5f:12:ee:29:e5:3b:96:ec:6d:
58:c9:a2:09:db:09:12:9a:94:b4:97:ab:3d:33:02:97:2a:95:
2c:8f:37:24:c6:d3:b5:cf:3d:75:1a:e9:ec:0d:f4:87:f2:8b:
09:f7:e1:3d:ce:d0:0c:77:fa:2c:af:ca:63:70:33:ac:22:00:
67:28:0c:e0:d0:61:c1:3b:96:eb:6e:bf:79:6b:be:b2:04:3e:
2d:7d:0e:b7:de:c8:72:2a:b1:5a:63:5d:6e:a4:a5:d5:2b:7d:
0f:3a:60:53:6e:2b:98:19:e0:45:34:7b:4c:0c:de:8c:00:29:
1c:1d:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:36:44 2026 by rpki-client